Multiple Choice
The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability. What would be the BEST approach for the CISO to reassure the IT group?
A) Work with the IT group and tell them to put IPS in-line and say it won't cause any network impact
B) Explain to the IT group that the IPS won't cause any network impact because it will fail open
C) Explain to the IT group that this is a business need and the IPS will fail open however, if there is a network failure the CISO will accept responsibility
D) Explain to the IT group that the IPS will fail open once in-line however it will be deployed in monitor mode for a set period of time to ensure that it doesn't block any legitimate traffic
Correct Answer:
Verified
Correct Answer:
Verified
Q103: Which of the following is considered a
Q104: While presenting his case to the court,
Q105: What is the smallest physical storage unit
Q106: An example of professional unethical behavior is:<br>A)
Q107: You are a security analyst performing reconnaissance
Q109: Your incident response plan should include which
Q110: Steven has been given the task of
Q111: What does ICMP Type 3/Code 13 mean?<br>A)
Q112: What feature of Windows is the following
Q113: What will the following command accomplish? dd